Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: Bcq+OW/Jq+/gTVwlMLDG3+pnJi8Pz9tqPN/TtSzUPZA=
Subject key identifier: E8:B3:B0:88:AB:34:D2:71:F4:47:C1:EC:D6:D2:EC:08:67:3D:BF:EE
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 019F8E3453C8FFB3F27797AA95B2AD73EA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 13C9
Signing time: Thu 23 Jul 2026 09:00:21 +0000
Manifest this update: Thu 23 Jul 2026 09:00:21 +0000
Manifest next update: Fri 24 Jul 2026 09:00:21 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: PWyWUZ1TrUosEldrIjwVAt4+dM9q2RTgdFUF6ls8HWE=)
2: 8tt6sbRcYdZ62Hlyx9KV5xcE06I.asa (hash: 0Y7iz76vgEOY5ho3DHxIE4tgSCKOh0nYjQCm1eEOdkw=)
3: CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa (hash: 5VuIA/sliXJSN13FjulNtyBF4Z5iaCwmwNeqLvTqwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:53:c8:ff:b3:f2:77:97:aa:95:b2:ad:73:ea:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Jul 23 09:00:21 2026 GMT
Not After : Jul 24 09:00:21 2026 GMT
Subject: CN=e8b3b088ab34d271f447c1ecd6d2ec08673dbfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a0:fc:32:a0:b6:a6:dc:ca:f3:d1:f1:25:03:
ff:ab:ff:88:5c:d3:ae:49:88:ce:ab:e4:ce:1e:4d:
3e:69:54:2e:b3:6f:33:78:f5:06:34:e8:4e:5a:20:
e7:e8:b0:c5:31:ef:09:ab:13:bd:a2:ea:ae:aa:3a:
35:0a:bd:56:1a:34:62:7d:3f:f2:c3:1b:7c:6c:92:
55:39:31:e7:b1:ee:59:b5:2b:54:11:72:02:c4:56:
fa:e1:48:d8:22:17:07:83:df:c3:e5:a0:46:22:6b:
b0:bc:55:96:70:b8:57:6b:88:d4:b8:29:fc:2b:08:
e7:2c:34:f2:9a:6a:c2:8f:c4:63:53:c4:e8:f2:d4:
3a:0e:8c:01:91:47:01:b8:00:a3:0d:9f:56:ed:b0:
f1:3f:4f:97:b4:e9:4f:b4:d9:bf:cd:55:ed:2a:2c:
e0:80:20:38:e1:22:dd:72:08:f1:04:a6:9b:d9:4d:
9e:f5:93:9d:dd:19:97:e9:04:be:9b:b2:f9:d4:0d:
fc:a2:40:5a:38:d8:57:72:68:a3:c1:23:fc:9f:98:
33:bf:96:a9:e9:bb:6d:80:b6:0a:df:f4:2f:b0:e5:
46:f4:aa:e7:c3:7f:00:3c:00:25:30:62:09:e7:92:
21:1e:af:5b:6c:a2:75:38:ca:5f:76:26:0c:07:7b:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B3:B0:88:AB:34:D2:71:F4:47:C1:EC:D6:D2:EC:08:67:3D:BF:EE
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d2:44:f4:a7:39:9b:95:0c:4d:33:0e:8b:3f:4a:8a:e7:2b:
e8:6b:73:cd:c6:5f:a8:dc:51:0f:d9:e0:23:da:17:b3:f8:3d:
94:4f:30:7b:89:f0:46:d0:f4:08:0c:cb:77:aa:d3:7e:17:af:
cb:9a:4a:2b:35:f7:46:36:3d:57:fc:9a:e3:f4:37:c9:8c:ca:
1e:7b:11:1f:c3:ed:cb:9d:fd:d5:41:f2:88:27:ac:84:ff:58:
20:ac:ce:9d:5e:3c:73:50:6a:d8:a0:d7:80:d2:d9:4d:44:53:
52:49:5e:37:5e:55:93:23:24:4a:28:ab:21:be:d3:10:b0:85:
aa:c1:d5:a8:b3:f9:c6:9a:80:ac:d1:e3:ec:4d:c0:65:43:f9:
f9:17:fa:cc:b2:e6:bf:26:34:d8:27:46:fd:df:27:a5:79:06:
98:1c:8a:05:27:85:68:a6:ac:2a:b7:10:3d:b8:7f:23:d4:f3:
f8:4b:9b:86:ee:38:43:1b:b5:72:81:75:0e:9f:0b:ee:63:80:
3c:6e:2f:6a:37:88:09:b6:cc:7d:8b:86:ee:14:22:0b:34:a2:
ac:e6:d2:65:e2:56:9e:98:a7:5a:39:21:99:d5:4e:38:08:9c:
8a:fa:cb:b6:fd:23:aa:ef:62:98:be:8a:b6:4c:ba:9a:33:0a:
6c:bd:01:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:49 2026 by rpki-client